BSI analysis shows: Nextcloud server stored passwords in plain text
A code analysis by the BSI shows that two-factor authentication could be bypassed in Nextcloud Server. Passwords were also stored in plain text.